PT-2021-5942 · NetGear · Netgear Rbk352+1

Alxhh · Published 2021-09-26 · Updated 2022-01-05 · CVE-2021-45521

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AC:L/AV:A/A:N/C:H/I:N/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10

Description The issue is related to a hardcoded password in certain NETGEAR devices. This allows a remote attacker to gain unauthorized access to protected information.

Recommendations For NETGEAR RBK352 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBR350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBS350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

BDU:2022-00457

CVE-2021-45521

Affected Products

Netgear Rbk352

Netgear Rbr350

References · 5

• https://kb.netgear.com/000064161/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0045 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45521 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45521 · Security Note
• https://bdu.fstec.ru/vul/2022-00457 · Security Note
• https://vuldb.com/?id.189147 · Note